The problem with passkeys
summary
Passkeys are presented as almost a magic bullet for consumer authentication—they work well if implemented—but they currently lack enterprise-ready management so large orgs remain "three steps behind." A practical mitigation for overlooked service and machine accounts is to TLS encrypt all machine communications, since there are reportedly thousands of machine identities per human and those slip under the radar. Apple’s device-tied MFA complicates adoption, Dashlane and others prototype enterprise tooling, and the main barrier is user education, not cryptography.
AI-written summary · about
chapters (5)
- 0:00Introduction to Identity Security
- 2:02Machine Identities as Attack Vector
- 5:11Passkeys as Identity Solution
- 7:21Consumer Adoption Challenges
- 8:26Enterprise Identity Lag
related talks
23mSimplify enterprise adoption of passkeys: Best practices for implementation
27mFrom Consumer Convenience to Enterprise Security: Demystifying Passkeys in the Workforce
25mSolving the Final Roadblock to Passkeys: a Fractured Development Environment
24mSecuring the Enterprise: How to use passkeys/WebAuthn to become phishing resistant today
25mRealizing Passkeys for Enterprise
22mGuarding the Gate: Strategies for High Security with Passkeys
30mAuthentication for humans, why passkeys finally make sense.
52mPasskeys: The Good, the Bad and the Ugly